Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Fhz4uLf2i8kLJ69SSSePpVk3m6Y.roa
File: Fhz4uLf2i8kLJ69SSSePpVk3m6Y.roa (raw, json)
Hash identifier: esoLqO7xkkQ8TlZ5ZnEAMQwH/xT+ss6inHgMm/AjPQs=
Subject key identifier: 16:1C:F8:B8:B7:F6:8B:C9:0B:27:AF:52:49:27:8F:A5:59:37:9B:A6
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018760039E2DF4D60708FB116E1F31C4BDBB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Fhz4uLf2i8kLJ69SSSePpVk3m6Y.roa
Signing time: Sat 08 Apr 2023 08:37:42 +0000
ROA not before: Sat 08 Apr 2023 08:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.151.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:03:9e:2d:f4:d6:07:08:fb:11:6e:1f:31:c4:bd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 8 08:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=161cf8b8b7f68bc90b27af5249278fa559379ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:56:7f:13:10:f9:3f:d6:ce:c4:23:07:45:
b6:20:69:43:e3:e6:70:7a:39:cc:e2:7a:4f:f5:e0:
9a:70:2c:8c:4c:c8:c3:9d:48:fc:9c:c4:51:cd:f0:
30:95:31:be:bb:53:b1:82:8a:3b:8a:2c:aa:dd:38:
c5:67:73:1e:59:a6:0e:2a:3b:f0:c2:f8:08:02:c3:
c2:f4:c3:75:d6:d3:4f:63:30:16:02:ba:59:80:ea:
26:d4:bb:c3:0f:7f:ed:09:d9:31:9b:fb:11:1c:12:
02:35:36:ff:f5:2c:3b:d3:64:b3:9e:1b:52:ce:7a:
a6:3e:95:0d:95:b2:9d:c5:77:48:83:c4:cc:d5:18:
d6:f9:7f:07:62:c5:6c:cc:0b:71:8b:69:60:3b:36:
73:87:7c:10:73:e4:3b:df:12:e2:3e:3b:9b:8e:9b:
42:ec:e4:47:ea:ff:a3:f9:74:e7:ac:2e:47:20:19:
03:3b:f3:06:44:c2:9e:4a:f8:29:4a:e3:0a:44:b0:
01:35:9b:0b:0b:29:30:7f:64:10:ce:77:9b:ea:6d:
e8:01:a6:a2:d6:17:26:06:87:2b:9b:53:72:34:eb:
87:3f:29:44:39:37:69:d6:e0:24:90:75:00:bb:20:
09:36:4f:3e:3d:01:85:53:0a:6e:e2:64:97:c3:04:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:F8:B8:B7:F6:8B:C9:0B:27:AF:52:49:27:8F:A5:59:37:9B:A6
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Fhz4uLf2i8kLJ69SSSePpVk3m6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.151.0/24
77.90.178.0/24
213.209.138.0/24
213.209.145.0/24
213.209.150.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
0b:19:9e:31:8d:68:35:5a:0a:23:28:0a:7e:d7:2d:d0:37:60:
85:dd:4b:17:e0:c4:2f:49:a6:04:46:6a:69:d2:f0:95:ff:c2:
c8:5e:25:f2:bf:39:ae:c5:e5:33:de:93:1c:43:89:9d:0e:ad:
27:43:3b:8d:2e:3d:9b:11:87:ec:f2:e3:bd:70:c1:b0:fc:87:
83:45:a2:c5:9a:01:44:6c:7d:53:0f:ee:94:9b:cb:b5:7b:ee:
68:13:9d:ab:e5:19:ee:95:4c:4a:d2:5f:9a:77:9e:e8:7b:09:
47:19:c7:ae:c5:7d:86:8a:d6:86:ed:65:20:45:65:c4:99:38:
35:a0:30:ce:13:8d:46:5e:77:97:64:e4:05:b2:59:87:8d:f5:
8e:9b:1d:6e:85:e1:a4:ed:c0:ee:34:14:34:aa:1b:19:e8:06:
7e:aa:19:d9:6f:48:bf:2a:cc:6a:25:ed:9e:19:21:37:2e:9d:
ab:d1:3a:19:08:67:80:9e:90:19:17:e6:fe:b0:aa:de:8d:4e:
5d:a7:1f:3e:22:f3:c4:32:af:49:3a:fc:fc:42:f8:33:25:13:
47:25:1f:46:f6:08:7b:83:94:86:40:2a:4e:91:cf:71:80:0d:
54:ee:01:06:f7:92:b5:6f:e4:eb:c6:37:e5:ce:eb:6a:c4:7c:
cb:fc:eb:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org